PRIVACY POLICY

107 YUN INC., 444 Stone Church Rd W, Unit K3, Hamilton, ON L9B 1R1, Canada, is responsible for the personal information this site handles. Privacy questions go to info@107yuntcg.com.

When you buy something, we receive what checkout needs to fill your order: your name, email address, phone number, shipping address, and the items you bought with their prices. That confirmation, the amounts charged and the tax collected become our sales record.

Stripe, our payment processor, also asks for your billing address and may ask your bank to confirm the payment (3D Secure). Stripe uses the billing address to screen the payment for fraud. On the order we keep the shipping address and Stripe's assessment of that payment — a level such as "normal" or "elevated", whether your bank confirmed it, and the state of any dispute. The billing address itself stays with Stripe.

Card details never reach us. Payment happens on Stripe's own payment page, so your card number goes directly to Stripe, our payment processor. Stripe's handling of it is described in Stripe's privacy policy.

If your order can ship to South Korea, checkout also asks for your Personal Customs Clearance Code (PCCC / 개인통관고유부호). It is a personal identifier issued by Korea Customs, which requires one on every parcel entering the country and holds packages that arrive without it. You enter it on Stripe's checkout page along with your address, so Stripe receives it as well; we keep it with your order record and use it only on the shipping and customs paperwork for that parcel. It is used for nothing else, and the field is optional.

When you send a quote request, we receive the shop or company name you enter, the contact name and email address you give us so we can reply, any message you write, and the list of products and quantities you selected.

So the quote form cannot be used to send floods of mail, we also turn your IP address into a short one-way code and store that code alongside the request. The address itself is never written down, the code cannot be turned back into it, and it is only counted against a ten-minute limit — after that window it affects nothing, and it is deleted with the request it belongs to.

Separately, Cloudflare reads your IP address at its edge on each visit to tell the site which country and region you are connecting from. Only the country code reaches the page — it is used to preselect your language, your shipping destination and a local-currency estimate. The region is used only for the page-view totals described next, and we do not store your address on our side.

We do count page views. Each time a page loads, the site adds one to a running total for that date, that page, and the country and region Cloudflare reports for your connection, and separately adds one to a total for the website that linked you to us (or "direct" when none did). Those totals are all that is kept — no IP address, cookie or identifier is stored with them, so they are not linked to you — and they are deleted after two years. A small marker in your browser's session storage lets a visit be counted once rather than on every page; the marker itself is never sent, and the browser discards it when the tab closes.

If you email us directly, we receive whatever your email contains, including your email address.

To fill your order: charge the agreed total, pack and ship the goods, email your confirmation and tracking number, and handle any damage claim or refund.

To answer wholesale enquiries: check availability, confirm allocation and pricing, and arrange shipping.

To see where our visitors come from: the page-view totals tell us which countries and regions look at which products, so we know where to offer our stock and which products to bring in.

To keep the business records the law requires — Canadian tax law makes us keep sales records, including who bought what, for several years.

We do not use your information for advertising, and we do not sell it or pass it to third parties for marketing.

Orders and quote requests are stored in a Cloudflare D1 database attached to this website.

If you ask to be emailed when a sold-out product is back, we keep that email address together with the product and the language you were using, send you one message when it returns, and use it for nothing else.

Stripe processes your payment and holds the payment record. Order confirmation and shipping emails are delivered through Resend, our email provider, which processes your email address and the message content to deliver them.

Email sent to an @107yuntcg.com address is forwarded by Cloudflare Email Routing to a company mailbox, so a copy passes through Cloudflare and sits in that mailbox.

Product pictures shown on the site are stored in Cloudflare R2. They contain no customer information.

The typefaces this site uses are loaded from Google Fonts, so on every page your browser requests the font files from Google's servers (fonts.googleapis.com and fonts.gstatic.com) before the page finishes drawing. Google therefore receives your IP address and the ordinary details that come with any web request — your browser and the page asking for the font. We send Google nothing else: no name, no order, no account.

The site keeps a few small values in your browser's local storage: your chosen language, the cart and quote list you are building, and the country Cloudflare reports for your connection — kept for up to seven days so the site can preselect your language and shipping destination and show an approximate local-currency amount beside our Canadian dollar prices. The country code stays on your device and is never stored on our side. When you check out, the language you were using is saved with your order so we can reply in it. The cart stays on your device too, until you check out or send it as a quote — at that point the items travel with your order or request. There is also one marker in session storage, set when you open the site, so your visit is counted once; the browser discards it when the tab closes.

Clearing your browser's site data removes them.

Order records are kept for as long as Canadian tax and business law requires — generally six years after the tax year they belong to. After that they are deleted.

Quote requests are kept while we are dealing with your enquiry and for our ordinary business records afterwards. When a record is no longer needed, it is deleted.

Page-view totals are kept for two years and then deleted.

If you would like an enquiry removed sooner, just ask. Order records we must keep for tax law cannot be deleted early, but they are used for nothing beyond those records.

Email info@107yuntcg.com to ask what we hold about you, to correct it, or to have it deleted. Please write from the address you used with us, or include your order number or shop name, so we can find the right record.

We will respond within a reasonable time. If a breach of our safeguards ever puts your information at real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as the law requires.

If this policy changes, the date at the top of this page changes with it.